Errors & limits.

401 Unauthorized

Every failure mode of the bearer model maps to 401: no Authorization header, a non-Bearer scheme, an unknown key, a revoked key, or an expired key. The fix is always the same — issue a fresh key and retry. Revocation is immediate: in-flight keys go to 401 on their next call.

Never a wrong product

Coverage is bounded by Buyary’s published catalog. When a query doesn’t confidently resolve, the call still succeeds — the tool returns the limited-coverage shape instead of a snapshot:

{
  "found": false,
  "other_matches": [
    { "name": "MacBook Pro (14-inch, M4)", "match_score": 42.86 }
  ]
}

This is the contract the Evidence Layer is built on: below the confidence floor it suggests — never a confidently-wrong product. Your agent should treat found: false as a first-class answer.

Rate limits

During the preview, the endpoint is rate-limited to 120 requests per minute per key, and a batch of N counts as N lookups. Each key tracks its own last-used time and call count in your dashboard, so per-agent keys give you per-agent visibility. Throttled calls return 429.